Privacy Policy
Last updated 25 October 2026. box1 is published by Fearing Labs.
box1 has no accounts and no servers of its own. There is no sign-in, and nothing about you or your collection is ever sent to us. Your collection lives on your device. If iCloud is on, it is also backed up to your own iCloud account, where Apple stores it and we cannot read it.
What box1 stores
| What | Where | Why |
|---|---|---|
| Your collection: which Pokemon and forms you have marked caught, shiny or origin, when you caught them, and any nickname and notes you add | On your device, and in your private iCloud database if iCloud is on | So the app can show your collection, and so it survives a lost phone and appears on your other devices |
| Your settings: appearance, sound, which forms to show, the games you have filtered to | On your device only | So the app opens the way you left it. box1 does not sync them between devices |
| A summary of your progress for the home-screen widgets | On your device only | So a widget can draw your progress without opening the app |
"On your device" includes your device's own backups, if you make them with iCloud Backup or a computer. Those backups are Apple's or your computer's, not ours.
The Pokemon reference data, sprites and cries all ship inside the app. Browsing them makes no network requests.
iCloud backup
When your device is signed into iCloud, box1 saves your collection to the private CloudKit database of your iCloud account. The data is held by Apple under Apple's privacy policy. A private database can only be read by the iCloud account it belongs to, so Fearing Labs cannot see, read or delete what is in it.
- iCloud off, or signed out: box1 stops backing up and keeps your collection on the device. Nothing is deleted.
- Switching to a different iCloud account: box1 keeps the collection on the device and backs it up to the new account. Its catches are added to whatever that account already holds. Nothing is removed from either account.
- No iCloud at all: every feature still works. Use Settings → Collection → Export to save a copy to a file you keep.
What box1 does not collect
- No accounts. There is no sign-in, and we hold no email address, name or identifier for you.
- No analytics and no tracking. The app contains no analytics SDK, no crash reporter, no advertising identifier and no third-party tracker. We do not know how often you open the app or what you tap.
- No advertising. There are no ads and no ad networks.
- No purchases. box1 is free and sells nothing in the app.
- No location, contacts, photos, camera or microphone. The app never asks for these permissions.
- No selling or sharing. We have no data about you to sell or share.
Exporting and importing
Export writes your collection to a file in a place you choose, such as Files or iCloud Drive. Import reads a file you choose. Both happen only when you ask, and the file goes nowhere else.
Removing your data
- Settings → Reset Pokedex clears every catch, nickname and note. With iCloud on, the reset syncs to your other devices on that iCloud account. A device that was offline keeps any changes it had not yet backed up, and syncs them when it reconnects.
- Deleting the app removes the copy on that device, including the widgets' summary.
- To remove box1's iCloud copy entirely, first delete the app from every device that has it, then delete box1's data from your iCloud storage in your device's Settings app, under your name → iCloud. A device that still has box1 installed puts its copy back the next time it syncs.
We cannot do any of this for you: we have no copy of your data to delete.
Visiting this website
Everything above is about the app. This site is static pages with no accounts, no cookies, no analytics and no scripts of any kind. It sets nothing in your browser.
It is hosted by Netlify, who record standard server access logs: your IP address, the page requested, the time, and your browser's user-agent string. They keep them for delivery and abuse prevention. We do not use those logs to build a profile of you.
If you write to support@box1.app, we keep your message and address only to answer you, and we delete them when you ask.
Children
box1 collects no personal information from anyone, children included.
Changes
If a later version of box1 adds accounts, purchases or anything else that changes what is collected, this policy will be updated before that version is released. The date at the top of this page changes with it.